FA
Product
fast-uri
17
CVEs
0
On KEV
7.5
Max CVSS
4
New 30D
Severity mix
Critical 0High 11Medium 4Low 2
Watch
Add fast-uri to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-110306 | 6.1 | Oct 20 | fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding Affected: before 2.4.8; 3.0.0 before 3.1.9; 4.0.0 before 4.2.3 |
| CVE-2026-110180 | 4.8 | Oct 20 | fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalization Affected: 2.4.2 before 2.4.8; 3.1.3 before 3.1.9; 4.0.1 before 4.2.3 |
| CVE-2026-86818 | 4.8 | Sep 15 | fast-uri vulnerable to mailto header injection via percent-encoded field-name desynchronization Affected: 4.1.3 before 4.1.5 |
| CVE-2026-86472 | 4.8 | Sep 15 | fast-uri vulnerable to inconsistent host case normalization via percent-encoded octets Affected: before 2.4.7; 3.0.0 before 3.1.8; 4.0.0 before 4.1.5 |
Showing 4